isis-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Rade, Joerg / Kuehne + Nagel / Ham GI-DP" <Joerg.R...@Kuehne-Nagel.com>
Subject AW: security module issue with 1.14.0
Date Tue, 27 Jun 2017 13:16:18 GMT
Thanks for sharing your findings! -j

-----Ursprüngliche Nachricht-----
Von: Stephen Cameron [mailto:steve.cameron.62@gmail.com]
Gesendet: Dienstag, 27. Juni 2017 14:08
An: users@isis.apache.org
Betreff: Re: security module issue with 1.14.0

It was due to an interaction with my layout.xml file, where I had added a dummy property to
avoid a schema validation error.

                            <c:fieldSet name="Metadata" >
                                <c:property id="dummy" />
                            </c:fieldSet>

There as a WARN message in the logs about it, that I ignored, that should have been a place
to start looking.



On Tue, Jun 27, 2017 at 9:21 PM, Stephen Cameron <steve.cameron.62@gmail.com
> wrote:

>  I now have a class that does not give the error, so something I have
> done 'differently'.
>
> On Mon, Jun 26, 2017 at 10:42 PM, Stephen Cameron <
> steve.cameron.62@gmail.com> wrote:
>
>> The routine below doesn't find a cached ObjectSpecification with
>> objectSpecId = "oneid.Account" though it seems to find it
>> successfully initially. So maybe the cache is being updated via the security module?
>>
>>     @Programmatic
>>     public ObjectSpecification lookupBySpecId(ObjectSpecId objectSpecId) {
>>         final ObjectSpecification objectSpecification =
>> cache.getByObjectType(objectSpecId);
>>         if(objectSpecification == null) {
>>             // fallback
>>             return loadSpecification(objectSpecId.asString());
>>         }
>>         return objectSpecification;
>>     }
>>
>> On Mon, Jun 26, 2017 at 10:11 PM, Stephen Cameron <
>> steve.cameron.62@gmail.com> wrote:
>>
>>> Hi,
>>>
>>> I've created a demo app with Isis 1.14.0 and am adding the security
>>> module, I get an exception as below that seems to be consistent
>>> whatever the permissions of the users role are:
>>>
>>> It seems a little strange that the
>>> SpecificationLoader.loadSpecification()
>>> method is being passed a class 'objectType' of "oneid.Account" and
>>> not the full class name.
>>>
>>> I'll investigate further tomorrow, but I don' think I have forgotten
>>> anything in the config of the module.
>>>
>>> Caused by: org.apache.isis.core.commons.exceptions.IsisException: No
>>> such class available: oneid.Account
>>>     at org.apache.isis.core.metamodel.specloader.SpecificationLoade
>>> r.loadSpecification(SpecificationLoader.java:289)
>>>     at org.apache.isis.core.metamodel.specloader.SpecificationLoade
>>> r.lookupBySpecId(SpecificationLoader.java:515)
>>>     at org.apache.isis.viewer.wicket.model.models.EntityModel.getSp
>>> ecificationFor(EntityModel.java:317)
>>>     at org.apache.isis.viewer.wicket.model.models.EntityModel.getTy
>>> peOfSpecification(EntityModel.java:313)
>>>     at org.apache.isis.viewer.wicket.ui.components.layout.bs3.tabs.
>>> TabGroupPanel.tabsFor(TabGroupPanel.java:64)
>>>     at org.apache.isis.viewer.wicket.ui.components.layout.bs3.tabs.
>>> TabGroupPanel.<init>(TabGroupPanel.java:89)
>>>     at org.apache.isis.viewer.wicket.ui.components.layout.bs3.col.C
>>> ol.buildGui(Col.java:212)
>>>     at org.apache.isis.viewer.wicket.ui.components.layout.bs3.col.C
>>> ol.<init>(Col.java:79)
>>>     at org.apache.isis.viewer.wicket.ui.components.layout.bs3.row.R
>>> ow.buildGui(Row.java:69)
>>>     at org.apache.isis.viewer.wicket.ui.components.layout.bs3.row.R
>>> ow.<init>(Row.java:54)
>>>     at org.apache.isis.viewer.wicket.ui.components.layout.bs3.BS3Gr
>>> idPanel.buildGui(BS3GridPanel.java:56)
>>>     at org.apache.isis.viewer.wicket.ui.components.layout.bs3.BS3Gr
>>> idPanel.<init>(BS3GridPanel.java:42)
>>>     at org.apache.isis.viewer.wicket.ui.components.entity.selector.
>>> links.EntityLinksSelectorPanelFactory.createComponent(Entity
>>> LinksSelectorPanelFactory.java:57)
>>>     at org.apache.isis.viewer.wicket.ui.ComponentFactoryAbstract.cr
>>> eateComponent(ComponentFactoryAbstract.java:98)
>>>     at org.apache.isis.viewer.wicket.viewer.registries.components.C
>>> omponentFactoryRegistryDefault.createComponent(ComponentFact
>>> oryRegistryDefault.java:121)
>>>     at org.apache.isis.viewer.wicket.viewer.registries.components.C
>>> omponentFactoryRegistryDefault.addOrReplaceComponent(Compone
>>> ntFactoryRegistryDefault.java:106)
>>>     at org.apache.isis.viewer.wicket.ui.pages.PageAbstract.addCompo
>>> nent(PageAbstract.java:346)
>>>     at org.apache.isis.viewer.wicket.ui.pages.PageAbstract.addChild
>>> Components(PageAbstract.java:341)
>>>     at org.apache.isis.viewer.wicket.ui.pages.entity.EntityPage.bui
>>> ldPage(EntityPage.java:195)
>>>     at org.apache.isis.viewer.wicket.ui.pages.entity.EntityPage.<in
>>> it>(EntityPage.java:114)
>>>     at org.apache.isis.viewer.wicket.ui.pages.entity.EntityPage.<in
>>> it>(EntityPage.java:82)
>>>     at org.apache.isis.viewer.wicket.ui.pages.entity.EntityPage.<in
>>> it>(EntityPage.java:94)
>>>     at org.apache.isis.viewer.wicket.ui.actionresponse.ActionResult
>>> ResponseType$9.call(ActionResultResponseType.java:159)
>>>     at org.apache.isis.viewer.wicket.ui.actionresponse.ActionResult
>>> ResponseType$9.call(ActionResultResponseType.java:157)
>>>     at org.apache.isis.core.metamodel.adapter.mgr.AdapterManager$Co
>>> ncurrencyChecking.executeWithConcurrencyCheckingDisabled(Ada
>>> pterManager.java:88)
>>>
>>
>>
>

Kühne + Nagel (AG & Co.) KG
Rechtsform: Kommanditgesellschaft, Bremen HRA 21928, USt-IdNr.: DE 812773878.
Geschäftsleitung Kühne + Nagel (AG & Co.) KG: Dr. Hansjörg Rodi (Vors. ), Martin Brinkmann,
Matthias Heimbach, Jan-Hendrik Köstergarten, Nicholas Minde, Michael Nebel, Lars Wedel, Matthias
Weiner.
Persönlich haftende Gesellschafterin: Kühne & Nagel A.G., Rechtsform: Aktiengesellschaft
nach luxemburgischem Recht, HR-Nr.: B 18745, Geschäftsführendes Verwaltungsratsmitglied:
Karl Gernandt.
Geschäftsleitung Region Zentral- und Osteuropa: Dr. Hansjörg Rodi (Vors.), Thierry Held,
Uwe Hött, Richard Huhn, Holger Ketz, Jan-Hendrik Köstergarten, Jan Kunze, Michael Nebel,
Guillaume Sauzedde, Mustafa Sener.

Wir arbeiten ausschließlich auf Grundlage der Allgemeinen Deutschen Spediteurbedingungen
2017 (ADSp 2017). Hinweis: Die ADSp 2017 weichen in Ziffer 23 hinsichtlich des Haftungshöchstbetrages
für Güterschäden (§ 431 HGB) vom Gesetz ab, indem sie die Haftung bei multimodalen Transporten
unter Einschluss einer Seebeförderung und bei unbekanntem Schadenort auf 2 SZR/kg und im
Übrigen die Regelhaftung von 8,33 SZR/kg zusätzlich auf 1,25 Millionen Euro je Schadenfall
sowie 2,5 Millionen Euro je Schadenereignis, mindestens aber 2 SZR/kg, beschränken. Die ADSp
sind auf unserer Webseite als Download erhältlich. Auf Anfrage senden wir Ihnen diese auch
gerne zu.
Mime
View raw message